Identity & Access Management Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Design, implement, and manage identity and access functionalities for human users, non-human identities, workloads, devices, services, and AI agents.

• Develop and maintain systems for authentication, authorization, federation, SSO, MFA, RBAC/ABAC, PAM, conditional access, policy-based authorization, just-in-time access, continuous verification, and privileged-access capabilities.

• Engineer roles, groups, entitlements, and privilege assignments adhering to the principles of least privilege and segregation of duties.

• Automate processes for identity provisioning, access reviews, privilege modifications, revocation, and deprovisioning.

• Implement phishing-resistant MFA, cryptographically bound authentication, and robust identity assurance throughout enrollment, authentication, federation, and recovery processes.

• Govern service accounts, machine and device identities, workloads, automated procedures, APIs, and identities of AI agents.

• Establish short-lived workload and agent identities utilizing federation, certificates, and modern workload-identity methodologies while minimizing dependence on persistent secrets.

• Collaborate with architects, engineers, and resource owners to ensure effective access mediation and to design systems that reduce excessive privileges, unwarranted sharing, and cross-domain exposure.

• Monitor identity posture and collaborate with Security Operations to investigate identity threats and promptly revoke compromised access.

⛳️ Requirements

• Practical experience in engineering enterprise IAM systems and integrations.

• In-depth knowledge of authentication, authorization, federation, identity lifecycle management, role/group design, separation of duties, and least privilege principles.

• Familiarity with phishing-resistant MFA, cryptographic authentication, identity proofing, federation, and contemporary identity assurance practices.

• Experience in managing both human and non-human identities, including service, machine, workload, or device identities.

• Proficiency in automating identity processes through APIs, scripting, or Infrastructure-as-Code.

• Understanding of PKI, secrets management, short-lived credentials, workload identity federation, and technologies like OIDC, OAuth, and SPIFFE/SPIRE.

• Ability to analyze identity and authorization across distributed systems and to work collaboratively with architects and engineers on secure access design.

🏝️ Benefits

• Healthcare coverage for families, including dental and vision options.

• Competitive salary and 401K plan.

• RSU grants available for full-time employees.

• Employee Stock Purchase Plan (ESPP) program.

• Flexible vacation policy.

• Maternity and paternity leave policies.

• Provision of a MacBook Pro for work along with a generous stipend to customize your workstation.

• Childcare bonus (for human children only).

• Support for fertility treatments and related assistance.

• Opportunities for learning and development.

• Commuter benefits offered.

• A culture that promotes a healthy work-life balance.